
Security News
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.
@telefonica/google-analytics
Advanced tools
@telefonica/google-analyticsGoogle Analytics 4 library for Telefonica web projects
import {initAnalytics, logEvent, setScreenName} from '@telefonica/google-analytics';
initAnalytics('G-XXXXXXXXXX');
setScreenName('my_screen_name');
logEvent({name: 'my_event_name', foo: 'bar'});
initAnalytics must be called before any other function. This function will inject the gtag script in the
document.
initAnalytics function is idempotent. Subsequent calls to initAnalytics will not have any effect.
logEvent and setScreenName calls won't send any data to Google Analytics until initAnalytics is
called. If you call logEvent or setScreenName before initAnalytics, the calls will be queued and sent
to Google Analytics once initAnalytics is done.
Events are normalized before being sent to Google Analytics:
If setScreenName is called multiple times with the same screen name, only the first call will be sent to
Google Analytics.
setScreenName and logEvent return a promise that resolves when the event has been sent to Google
Analytics.
All the events are automatically filled with a screenName param containing the last screen name set with
setScreenName.
Events are sent to Google servers by default (using gtagTransport), but you can use a custom transport to
change this behavior. For example, Novum app uses the webview bridge to send the events to the native app, and
then the native app sends the events to Firebase.
Another use case of custom transport is to log events in the browser console in development mode:
import {initAnalytics, consoleTransport, gtagTransport} from '@telefonica/google-analytics';
initAnalytics('G-XXXXXXXXXX', {
transport: process.env.NODE_ENV === 'production' ? gtagTransport : consoleTransport,
});
FAQs
> Google Analytics 4 library for Telefonica web projects
We found that @telefonica/google-analytics demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.